Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 - ADMINISTRATION Administration Manual page 97

For VPNs with a client, include a hyperlink that points to the VPN Client.
Example:
C:\Program Files\Cisco Systems\VPN Client\ipsecdialer.exe
This link launches the application, but the user stills need to log in. A switch can be entered into
the Parameters field, or a batch file could be created and pointed to, rather than the client
executable).
NOTE: VPN clients that generate virtual adapters (for example, Cisco Systems* VPN Client 4.0)
display the: "Policy Has Been Updated" message. The Policy has not been updated, the Endpoint
Security Client is simply comparing the virtual adapter to any adapter restrictions in the current
policy.
The standard VPN Enforcement settings described above make VPN connectivity an option. Users
are granted connectivity to the current network whether they launch their VPN or not. For stricter
enforcement, see Advanced VPN Settings below.
Advanced VPN Settings
Advanced VPN controls are used to set Authentication Timeouts to secure against VPN failure,
connect commands for client-based VPNs, and use Adapter controls to control the adapters
permitted VPN access.
To access this control, click the Global Policy Settings tab, click the "+" symbol next to VPN
Enforcement, then click
Advanced
Advanced VPN Enforcement
Figure 6-16
The following advanced VPN enforcement settings can be configured:
in the policy tree on the left.
Creating and Distributing Security Policies 97